Go play somewhere else
by Volker Weber
OK, I have a solution of sorts to referrer spam - I bounce it back to them. I have almost eliminated it, except for one from h*hproftclub who refuses to go away. To be really EVIL, I’ve redirected that spammers output alone to the signup page at www.webclipping.com/signup.html. Probably not entirely ethical but then we’re dealing with two unethical orgs - why not play them off against each other? (Yeah I know, two wrongs…)
It does mean more crap in my log file (the way I have it set up) but it’s fun. Now, my log file sees an attempt to access a page on my site, which is redirected. However, because of the way it is redirected the bot still thinks it is on MY site - so I also get to see the cgi request. For example:
207.248.240.119 - - [04/Mar/2005:06:19:37 -0600] "GET /cgi-bin/signup.cgi?cname=web+poker&caddress=+%3Ch1%3EYou+can+a...
So now webclippings are being auto-spammed by a spammer! We hate them both - now they can hate each other. And I think I am effectively hidden from this loop, thanks to how these redirects work. It just looks like h**hprofit is spamming them direct!
Ha ha ha! Death to the spammer…
Comments
Komisch, diese Art von stupidity häuft sich in den letzten Tagen - bei mir und einem Kommentar-Schreiber sind es zufälligerweise alles Schweizer User...
Absolutely the same situation here - same IP address hits my RSS feed, then tries to hit a malformed URL for each RSS'd blog entry in 1 second intervals. Go away, news.allresearch.com!
Tell them to go somewhere else. ;-)
The domain is registered to a guy in NY, the web site says their location is LA.
/k
Registrant:
SILVERMAN, NOAH (ALLRESEARCH4-DOM)
276 CANAL ST FL 7
NEW YORK, NY 10013-3531
US
Domain Name: ALLRESEARCH.COM
Administrative Contact, Technical Contact:
SILVERMAN, NOAH (NXS699) noah@webclipping.com
276 CANAL ST FL 7
NEW YORK, NY 10013-3531
US
212 965 1900 fax: 212 965 8733
Record expires on 12-Sep-2009.
Record created on 13-Sep-1998.
Database last updated on 8-Oct-2004 09:40:39 EDT.
Domain servers in listed order:
AUTH1.DNS.COGENTCO.COM 66.28.0.14
AUTH2.DNS.COGENTCO.COM 66.28.0.30
Tell them to go somewhere else. ;-)
Ok. That would be easy:
RewriteEngine On
RewriteCond %{REMOTE_ADDR} ^38\.144\.36\.16
RewriteRule (.*) http://webmonster.de/ [F,L]
Post a comment
Recent comments
Daniel Haferkorn
on Interview goes bad. Or just honest. at 20:44
ursus schneider
on Interview goes bad. Or just honest. at 19:50
Thomas Cloer
on Tame your Time Machine at 18:51
Volker Weber
on Tame your Time Machine at 17:36
Frank Mueller
on Tame your Time Machine at 17:33
Pieterjan Lansbergen
on Tame your Time Machine at 17:02
Samuel Orsenne
on New hardware coming up at vowe's magic flying circus at 15:52
Johannes Matzke
on Interview goes bad. Or just honest. at 13:47
Volker Weber
on Sonos gear at 50% off at 13:44
Volker Weber
on Aqua Alta Surfing - quite a PR stunt for Red Bull at 13:35
Volker Weber
on BlackBerry Storm too nervous at 13:33
David Justen
on Aqua Alta Surfing - quite a PR stunt for Red Bull at 13:26
Volker Weber
on New hardware coming up at vowe's magic flying circus at 10:35
Samuel Orsenne
on New hardware coming up at vowe's magic flying circus at 10:18
Glen Salmon
on Sonos gear at 50% off at 04:34
Bill Buchan
on Aqua Alta Surfing - quite a PR stunt for Red Bull at 23:20
Torsten Otto
on Sonos gear at 50% off at 21:57
Peter de Haas
on Windows blues at 21:26
Hajo Schmitt
on New hardware coming up at vowe's magic flying circus at 20:14
Hajo Schmitt
on New hardware coming up at vowe's magic flying circus at 20:07
Volker Weber
on Windows blues at 19:54
Peter de Haas
on Windows blues at 19:47
Volker Weber
on Nokia advertises Lotus Notes Traveler at 19:43
Volker Weber
on New hardware coming up at vowe's magic flying circus at 19:35
Goetz Goerisch
on New hardware coming up at vowe's magic flying circus at 19:09
Click here to subscribe
